feat(container): update image ghcr.io/element-hq/synapse ( v1.148.0 → v1.154.0 )#2881
Open
renovate[bot] wants to merge 1 commit into
Open
feat(container): update image ghcr.io/element-hq/synapse ( v1.148.0 → v1.154.0 )#2881renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
--- kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse
+++ kubernetes/subterra/apps/matrix/synapse/app Kustomization: flux-system/cluster-apps-synapse HelmRelease: matrix/synapse
@@ -77,13 +77,13 @@
- ::1/128
- fe80::/64
- fc00::/7
image:
pullPolicy: IfNotPresent
repository: ghcr.io/element-hq/synapse
- tag: v1.148.0
+ tag: v1.154.0
ingress:
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
external-dns.alpha.kubernetes.io/target: ingress.ur30.ru
nginx.ingress.kubernetes.io/cors-allow-origin: '*'
nginx.ingress.kubernetes.io/enable-cors: 'true' |
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-matrix-synapse
@@ -17,13 +17,13 @@
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synapse
template:
metadata:
annotations:
- checksum/secrets: 9a94ebacca3e71bd670f5770c4ea948038e9a65626ff291e2c4977676b8b2b6e
+ checksum/secrets: 7c90960228ebb729c8ff8df9eef40a10cfd79253421cbde5eecf5d2d29d319d2
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synapse
spec:
@@ -53,13 +53,13 @@
key: password
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
securityContext: {}
ports:
- name: http
containerPort: 8008
protocol: TCP
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-appservice
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: appservice
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 80497d579c4a449db6ec2b3bbf6d9d672849fdb56acf9c9a436b80f2a576df31
+ checksum/secrets: 4c1f59a3bff89cf023f7d28c982a0b0f16cdcecd77de92f9c77461b442342eb8
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: appservice
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-reader
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-reader
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: e03f85dc39f1f1a014da93232d8426c93b85463097eda1da63e0683f78292813
+ checksum/secrets: 79c2c71029d0ac15f1e85a4621cbe304682a5c4322b06db76812783f8a408896
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-reader
spec:
@@ -54,13 +54,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-federation-sender
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-sender
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: fd4983584eddbecd1b5e47a0efc771ecc40f4716ddc5d18e5b563976d7fe85de
+ checksum/secrets: d5c74f673c0246c7d218b4f01974e4b91f5a25272175695db0a7ce216fe825c8
setGateway: 'true'
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: federation-sender
spec:
@@ -54,13 +54,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-frontend-proxy
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: frontend-proxy
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: f490c7a8cff8b793c69d0aa4118011cc24f813f73f2e448cd90f9cbf363b696d
+ checksum/secrets: f284d34c81d25ba3c628e175a1c153ce6cc9e6042d892cd50cc86f84cd5daaad
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: frontend-proxy
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-generic-worker
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: generic-worker
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 0b0e1a720ae50b4693eb49f0448a2a2be0b940e4c7785a2345e77760f7b8b3c5
+ checksum/secrets: 3d3fb9341a83f48fd085ad1547c4ce4799b646b9305fd3e2826c0ea8a37efb37
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: generic-worker
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-messages
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-messages
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: messages
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: c9450dbc2743d2833893614854eaf21f9c5b1bbf35325970be2e661239530db8
+ checksum/secrets: 014d5b0351e0a8c7afdac3bbbcebda6e8d95bcf356a92ad4c4b832b4595471f6
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: messages
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-pusher
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: pusher
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: b21913bdf5ed20b5f1b8ca372d2c935f9b129f84eaff6e5d353d0fd5b684f572
+ checksum/secrets: e52802b434c3c630816e49121f9ffd70dc556f546aa562239622a6bad79314ad
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: pusher
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
livenessProbe:
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-sso
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-sso
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: sso
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: 6701db9a5d24537f6ede750d86686ad92c69f64a4c788a833a0b25a6adc7a0bd
+ checksum/secrets: eb05a54499f359342befb1b017c3dc7a70b8b45a1c4d47b81c1a2b299e865e04
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: sso
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener
--- HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron
+++ HelmRelease: matrix/synapse Deployment: matrix/synapse-synchrotron
@@ -18,13 +18,13 @@
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synchrotron
template:
metadata:
annotations:
checksum/worker-config: a848cdf3febe7310880eb2671d2341b0bb05e0c9de6e3a391740e6cf3751ce3b
- checksum/secrets: f7c9f6b2c54bdcf2805aa5b6503d923aa812a60a3bc5cdd61e091119657c6fca
+ checksum/secrets: 387dd7598dae8723d3e58a44a219da7ecbafb694fbf98f73b43860c0b4ac4814
labels:
app.kubernetes.io/name: matrix-synapse
app.kubernetes.io/instance: synapse
app.kubernetes.io/component: synchrotron
spec:
serviceAccountName: default
@@ -53,13 +53,13 @@
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: synapse-secret
key: redis-password
securityContext: {}
- image: ghcr.io/element-hq/synapse:v1.148.0
+ image: ghcr.io/element-hq/synapse:v1.154.0
imagePullPolicy: IfNotPresent
ports:
- name: metrics
containerPort: 9090
protocol: TCP
- name: listener |
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
9ce7954 to
dc94841
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
dc94841 to
144298b
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
144298b to
0f5ce11
Compare
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
0f5ce11 to
c48db27
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
c48db27 to
9101dcf
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
9101dcf to
de32542
Compare
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
de32542 to
fe48510
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
2 times, most recently
from
f060507 to
90a5976
Compare
renovate
Bot
changed the title
… v1.154.0 ) | datasource | package | from | to | | ---------- | -------------------------- | -------- | -------- | | docker | ghcr.io/element-hq/synapse | v1.148.0 | v1.154.0 |
renovate
Bot
force-pushed
the
renovate/ghcr.io-element-hq-synapse-1.x
branch
from
90a5976 to
f534033
Compare
renovate
Bot
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.148.0→v1.154.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
element-hq/synapse (ghcr.io/element-hq/synapse)
v1.154.0Compare Source
Synapse 1.154.0 (2026-06-04)
No significant changes since 1.154.0rc1.
Synapse 1.154.0rc1 (2026-05-27)
Features
io.element.msc4452.preview_urlcapability.If
experimental_features.msc4452_enabledistrue, the/_matrix/(client/v1/media|media/v3)/preview_urlendpointnow responds with a 403 status code when the capability is disabled. (#19715)
Bugfixes
M_BAD_JSON) when sending a message with amentionsfield and Synapse modulecheck_event_allowedcallback registered (frozen event). Contributed by @gaetan-sbt. (#19634)/syncwhere it could attempt to fetch data with flawed invalid future tokens. (#19644)/syncfailing when MSC4354 Sticky Events are enabled and the sync request filters out Ephemeral Data Units (EDUs). (#19787)attrsminimum version requirement inpyproject.tomlfile. Contributed by Oleg Girko. (#19789)Improved Documentation
update_profile_informationsetting is true. (#19508)Internal Changes
Event.contentfield to Rust. (#19725)quarantined_mediawaiting patterns with standardwait_for_stream_token(...). (#19764)We can't get valid state history.so you can correlate everything byevent_id. (#19765)RoomVersionstructs. (#19766)WorkerLocktests to better stress theWORKER_LOCK_MAX_RETRY_INTERVAL. (#19772)TypeIshelper to avoid scatteredisinstancecasts. (#19774)StrCollectionforprev_state_events. (#19777)v1.153.0Compare Source
Synapse 1.153.0 (2026-05-19)
No significant changes since 1.153.0rc3.
Synapse 1.153.0rc3 (2026-05-15)
Bugfixes
Synapse 1.153.0rc2 (2026-05-13)
Bugfixes
unsignedfield of events. The bug was introduced in 1.153.0rc1. (#19769)Synapse 1.153.0rc1 (2026-05-08)
Features
msc3266_enabled. Contributed by @dasha-uwu. (#19720)m.room.createis now a required part of strippedinvite_state/knock_state. Contributed by @FrenchGithubUser @Famedly. (#19722)tombstonedandreplacement_roomin room details on admin API endpointGET /_synapse/admin/v1/rooms/<room_id>. Contributed by Noah Markert. (#19737)Bugfixes
authlibminimum version requirement inpyproject.tomlfile. Contributed by Oleg Girko. (#19742)Improved Documentation
use_frozen_dicts. (#19711)Internal Changes
Event.signaturesfield to Rust. (#19706)Event.unsignedfield to Rust. (#19708)WORKER_LOCK_MAX_RETRY_INTERVALto 5 seconds to reduce idle time after lock is released. (#19755)Durationso time units have to be specified. (#19756)v1.152.1Compare Source
Synapse 1.152.1 (2026-05-07)
Security Fixes
WorkerLocktime out interval to a maximum of 60 seconds. Contributed by Famedly. (#19394, ELEMENTSEC-2026-1706, GHSA-8q93-326v-3m7g, CVE-2026-45078)v1.152.0Compare Source
Synapse 1.152.0 (2026-04-28)
No significant changes since 1.152.0rc1.
Configuration changes needed for deployments using workers
For deployments using workers, please note that this version introduces a new
quarantined_media_changesstream writer, which may require configuration changes.Please see the the relevant section in the upgrade notes for details.
Without configuring this new stream writer, only the main process will be able to handle the
/media/quarantineadmin API endpoints for quarantining media.Synapse 1.152.0rc1 (2026-04-22)
Features
unstable_features. (#19642)list, fetch and delete user reports. (#19657)
device_lists_changes_in_room. (#19473, #19709)Bugfixes
device_keys: nullin the request toPOST /_matrix/client/v3/keys/upload, as per the spec. This was temporarily allowed as a workaround for misbehaving clients. (#19637)SQLITE_DBCONFIG_DEFENSIVEby default, such as macOS. (#19690)Improved Documentation
_setup_sequence(...)inportdb. (#19675)Internal Changes
limitargument in_maybe_backfill_inner(...). (#19630)spam_checker_spammyinternal event metadata. (#19453)FilteredEventclass that saves us copying events. (#19640)EventInternalMetadatato useArc<RwLock<_>>. (#19669)v1.151.0Compare Source
Synapse 1.151.0 (2026-04-07)
Bugfixes
KNOWN_ROOM_VERSIONS.__contains__raisingTypeErrorfor non-string keys, which could cause/syncto fail for rooms with aNULLroom version in the database. Bug introduced in #19589 as part of v1.151.0rc1. (#19649)Synapse 1.151.0rc1 (2026-03-31)
Features
room_versionandencryptionfields in the space/room/hierarchyAPI (part of MSC3266). (#19576)Bugfixes
org.matrix.msc4284.policyandm.room.policystate events. (#19503)Build and push complement imageCI job not havingpoetryavailable for the Complement runner script. (#19578)Deprecations and Removals
Internal Changes
demo/start.shscript. (#19538)RoomVersionattributes. (#19577)redacted_becausefrom internal unsigned. (#19581)RoomVersionto Rust. (#19589)./scripts-dev/complement.sh. (#19592)HomeserverTestCase.pump()docstring to demystify behavior (Twisted reactor/clock). (#19602)HomeserverTestCase.pump()in favor of more directHomeserverTestCase.reactor.advance(...)usage. (#19602)statement_timeoutto 10m (previously 1h). (#19604)v1.150.0Compare Source
Synapse 1.150.0 (2026-03-24)
No significant changes since 1.150.0rc1.
Upgrade notes
Please read the upgrade notes as this release includes a few changes that may affect your deployment.
Synapse 1.150.0rc1 (2026-03-17)
Features
GET /extremitiesendpoint. (#19314)delay_idin the event'sunsignedsection in/syncresponses to the event sender. (#19479)Bugfixes
Build and push complement imageCI job pointing to non-existent image. (#19523)Improved Documentation
/<param>instead of as/$param. (#19307)outbound_federation_restricted_tocan also be used with the Secure Border Gateway (SBG). (#19517)Internal Changes
devdependencies to PEP 735 dependency groups. (#19490)systemd-pythondependency and thesystemdextra on thesynapsepackage. (#19491)/versionsand/auth_metadatapublic endpoints. (#19530)Processed requestlogs. (#19548)v1.149.1Compare Source
Synapse 1.149.1 (2026-03-11)
Internal Changes
matrix-synapse-ldap3to0.4.0to supportsetuptools>=82.0.0. Fixes #19541. (#19543)v1.149.0Compare Source
Synapse 1.149.0 (2026-03-10)
No significant changes since 1.149.0rc1.
Synapse 1.149.0rc1 (2026-03-03)
Features
Bugfixes
/syncmissing membership event instate_after(experimental MSC4222 implementation) in some scenarios. (#19460)Internal Changes
JoinRoomAliasServletwith tracing. (#19461)docker system infoin CI so we have a plain record of how GitHub runners evolve over time. (#19480)test_disconnecttest helper so that pytest doesn't see it as a test. (#19486)Content-Lengthwith the Rust HTTP client. (#19498)Configuration
📅 Schedule: (in timezone Europe/Moscow)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.